TaskSnap-Study/.github/workflows/release.yml at main · luciocanepa/TaskSnap-Study · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
name: Release

# Triggers:
#   - Push to main branch (creates/updates a release from package.json version)
#   - Manual dispatch for ad-hoc releases
#
# A verify job (lint, build, test) must pass before publishing.
# macOS builds are split by architecture for native module compatibility.
on:
  push:
    branches:
      - main
  workflow_dispatch:

permissions:
  contents: write

jobs:
  # ── Verify (lint, build, test) ─────────────────────────────────────────────
  verify:
    strategy:
      fail-fast: false
      matrix:
        os: [macos-latest, windows-latest]

    runs-on: ${{ matrix.os }}

    steps:
      - uses: actions/checkout@v4
        with:
          token: ${{ secrets.SUBMODULES }}
          submodules: recursive

      - uses: actions/setup-node@v4
        with:
          node-version: 24
          cache: npm

      - name: Install dependencies
        run: npm ci

      - name: Lint
        run: npm run lint

      - name: Build
        run: |
          npm run postinstall
          npm run build

      - name: Test
        run: npm test

  # ── macOS arm64 build + publish ─────────────────────────────────────────────
  publish-mac-arm64:
    needs: verify
    runs-on: macos-latest

    steps:
      - uses: actions/checkout@v4
        with:
          token: ${{ secrets.SUBMODULES }}
          submodules: recursive

      - uses: actions/setup-node@v4
        with:
          node-version: 24
          cache: npm

      - name: Install dependencies
        run: npm ci

      - name: Build and publish
        env:
          APPLE_ID: ${{ secrets.APPLE_ID }}
          APPLE_ID_PASS: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
          CSC_LINK: ${{ secrets.CSC_LINK }}
          CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          npm run postinstall
          npm run build
          npm exec electron-builder -- --mac --arm64 --publish always

      - name: Upload installer artifact
        uses: actions/upload-artifact@v4
        with:
          name: installer-macos-arm64
          path: |
            release/build/**/*.dmg
            release/build/**/*.zip
          if-no-files-found: warn
          retention-days: 14

  # ── macOS x64 build + publish ───────────────────────────────────────────────
  publish-mac-x64:
    needs: verify
    runs-on: macos-13

    steps:
      - uses: actions/checkout@v4
        with:
          token: ${{ secrets.SUBMODULES }}
          submodules: recursive

      - uses: actions/setup-node@v4
        with:
          node-version: 24
          cache: npm

      - name: Install dependencies
        run: npm ci

      - name: Build and publish
        env:
          APPLE_ID: ${{ secrets.APPLE_ID }}
          APPLE_ID_PASS: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
          CSC_LINK: ${{ secrets.CSC_LINK }}
          CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          npm run postinstall
          npm run build
          npm exec electron-builder -- --mac --x64 --publish always

      - name: Upload installer artifact
        uses: actions/upload-artifact@v4
        with:
          name: installer-macos-x64
          path: |
            release/build/**/*.dmg
            release/build/**/*.zip
          if-no-files-found: warn
          retention-days: 14

  # ── Windows build + publish ─────────────────────────────────────────────────
  publish-windows:
    needs: verify
    runs-on: windows-latest

    steps:
      - uses: actions/checkout@v4
        with:
          token: ${{ secrets.SUBMODULES }}
          submodules: recursive

      - uses: actions/setup-node@v4
        with:
          node-version: 24
          cache: npm

      - name: Install dependencies
        run: npm ci

      - name: Build and publish
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          npm run postinstall
          npm run build
          npm exec electron-builder -- --win --publish always

      - name: Upload installer artifact
        uses: actions/upload-artifact@v4
        with:
          name: installer-windows
          path: |
            release/build/**/*.exe
            release/build/**/*.nupkg
          if-no-files-found: warn
          retention-days: 14